Feedback-ID: i525146e8:Fastmail
Date: Fri, 27 Oct 2023 00:43:30 +0000
From: Peter Todd <pete@petertodd.org>
To: Antoine Riard <antoine.riard@gmail.com>,
 Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <ZTsHsn5s/wswxlIo@petertodd.org>
References: <CALZpt+GdyfDotdhrrVkjTALg5DbxJyiS8ruO2S7Ggmi9Ra5B9g@mail.gmail.com>
 <CALZpt+G-eLLShrJckLG1UMDQ9tMGzqP1pBsUpEZ+82e9wHZGYw@mail.gmail.com>
 <CALZpt+GfM=7XyxXzcC5mMskVJg6L4sH61-_2H9+FHHJU0KN+Aw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="JKgD872yQExnQkWu"
Content-Disposition: inline
In-Reply-To: <CALZpt+GfM=7XyxXzcC5mMskVJg6L4sH61-_2H9+FHHJU0KN+Aw@mail.gmail.com>
Cc: security@ariard.me, "lightning-dev\\\\@lists.linuxfoundation.org"
 <lightning-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] Full Disclosure: CVE-2023-40231 / CVE-2023-40232
 / CVE-2023-40233 / CVE-2023-40234 "All your mempool are belong to us"
Precedence: list


--JKgD872yQExnQkWu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Oct 21, 2023 at 09:05:35PM +0100, Antoine Riard via bitcoin-dev wro=
te:
> In the meanwhile, lightning experts have already deployed mitigations whi=
ch
> are hardening the lightning ecosystem significantly in face of simple or
> medium attacks. More advanced attacks can only be mounted if you have
> sufficient p2p and mempool knowledge as was pointed out by other bitcoin
> experts like Matt or Peter (which take years to acquire for average bitco=
in
> developers) and the months of preparation to attempt them.

To be clear, I am not making any claims about how easy this attack is to pu=
ll
off. Indeed, there are probably even cases where it happens by accident. Eg
imagine a node with a HTLC-preimage that happens to be offline and then onl=
ine
at the right time to broadcast a HTLC-preimage redemption transaction with a
higher fee than the timeout transaction. If the other node happens to go
offline at the right time, after broadcasting the timeout transaction, it m=
ay
not notice the HTLC-preimage in the mempool, and thus fail to redeem it.

OP_Expire would help avoid this situation, by making it impossible to redeem
the HTLC-preimage after the timeout.

--=20
https://petertodd.org 'peter'[:-1]@petertodd.org

--JKgD872yQExnQkWu
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=j9JO
-----END PGP SIGNATURE-----

--JKgD872yQExnQkWu--